SAP Fiori Client Access Control Bypass

The vulnerability of the SAP Fiori Client mobile environment is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass the system’s authentication process remotely...

SAP Fiori Client Access Control Disclosure

The vulnerability of the SAP Fiori Client mobile environment is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information...

PT-2017-3777

Name of the Vulnerable Software and Affected Versions SAP Fiori Client versions prior to 1.11.5 Description The issue is related to insufficient access control in the SAP Fiori Client mobile environment, allowing a remote attacker to gain unauthorized access to protected information and execute...

SAP Sybase SQL Anywhere OpenSSL TLS心跳信息泄漏漏洞

CVE ID:CVE-2014-0160 SAP Sybase SQL Anywhere是一套全面的解决方案,它提供了数据管理、同步和数据交换技术,可快速在远程和移动环境中开发并配置数据库驱动的应用程序。 SAP Sybase SQL Anywhere所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 SAP Sybase SQL Anywhere 12.x SAP Sybase SQL Anywhere 16.x SAP Sybase SQL...